medium5.4
CVE-2020-25454
Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe.
Impact
Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grocy Project | Grocy | Version 2.7.1 |